Solved TLS SIP Trunk

[ygonzales]

Dear All,
We wanted to test TLS SIP Trunk, generally it works with a Zoiper as a standalone clinet

We wanted to move number to 3CX and make a tests, but we receive

No logs at all , no set request to registration

How ever the same certificate works with Zoiper and we receive calls

Note:
We also enabled:
Enable PCI compliance SSL/SecureSIP Transport and Ciphers (This will leave only TLSv1.2 enabled and may prevent old legacy phones and old 3CX Apps to connect remotely to your system)

As was defined in manual


But When
We set disable to:
Enable PCI compliance SSL/SecureSIP Transport and Ciphers (This will leave only TLSv1.2 enabled and may prevent old legacy phones and old 3CX Apps to connect remotely to your system)

There is a error in a LOG

Creating IPv4 TLS transport: Failed opening PEM chain file


Anyway we tried everything possible way, no luck

 

[Alphabetic]

Under SIP Trunk Options tab did you change the transport to TLS?

 

[StefanW]

and beside this under settings - security you must turn on Secure IP also...

 

[ygonzales]

Dear All,
Secure IP - Enabled
SIP Trunk Options - transport Set to TLS

Also uploaded certificate from ISP, but no luck

 

[JohnS_3CX]

Once you enable TLS transport, you must upload a PEM certificate. Can you confirm it was generated as PEM?

Note: Renaming it does not make it PEM format.

 

[ygonzales]

Update, have managed to make it work

Settings - Secure SIP/TLS

I create a self signed certificate (on my side for 3CX, not sure why it does not work with out it) and put there...

After trunk was registered

 

[JohnS_3CX]

I'm glad to hear it was resolved, thanks for updating the thread with your solution.